EDB-51726

PoC

GLPI GZIP(Py3) 9.4.5 - RCE

view exploit source exploit_dbtype webappsauthor Brian Peterspublished 2023-10-09catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2020-11060UShigh8.8Exploit
In GLPI before 9.4.6, an attacker can execute system commands by abusing the backup functionality. Theoretically, this vulnerability can be exploited by an attacker without a valid…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan